Managing personal Outlook.com account settings, security, and privacy
If the Microsoft account itself was hacked, start with the Microsoft Sign-in Helper. It can guide to self-help steps or offer the chance to talk to an agent.
Recommended order:
- Scan the PC for malware first In Windows Security, go to Virus and threat protection > Scan options > Full scan > Scan now. This should be done before changing the password.
- Try to change or reset the password
- If sign-in still works, change the password.
- If sign-in does not work, use the password reset flow.
- Review account security activity Go to the Security basics page, select Review activity, and check for unusual sign-in attempts. If activity is not recognized, use This wasn't me or Secure your account where shown.
- Check account settings that attackers often change Review connected accounts, forwarding, and automatic replies.
- If recovery options were changed Use the Sign-in Helper first. If needed, complete the Microsoft account recovery form and provide a working email address that can receive Microsoft’s response.
Important limitation:
- If two-step verification is turned on and access to all alternate verification methods is lost, support agents cannot send password reset links or change account details.
To reduce future lockout risk after recovery, add another sign-in or verification method in Advanced security options.